CVE-2025-53512 - Vulnerability Details - OpenCVE

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00044.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Canonical	Juju

Configuration 1 [-]

OR	cpe:2.3:a:canonical:juju::::::go::*
	cpe:2.3:a:canonical:juju::::::go::*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Canonical	Juju

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63

History

Tue, 26 Aug 2025 18:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:canonical:juju::::::go::*

Mon, 14 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00028}`	epss `{'score': 0.00032}`

Tue, 08 Jul 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 08 Jul 2025 17:00:00 +0000

Type	Values Removed	Values Added
Description		The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
Title		Sensitive log retrieval in Juju
Weaknesses		CWE-200 CWE-285
References		https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2025-07-08T16:47:44.427Z

Updated: 2025-07-08T19:09:24.844Z

Reserved: 2025-07-02T08:52:42.036Z

Link: CVE-2025-53512

Vulnrichment

Updated: 2025-07-08T19:09:16.987Z

NVD

Status : Analyzed

Published: 2025-07-08T17:16:04.400

Modified: 2025-08-26T17:54:14.010

Link: CVE-2025-53512

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-07-13T21:47:20Z

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-53512", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2025-07-02T08:52:42.036Z", "datePublished": "2025-07-08T16:47:44.427Z", "dateUpdated": "2025-07-08T19:09:24.844Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://juju.is/", "defaultStatus": "unaffected", "packageName": "juju", "platforms": ["Linux"], "product": "Juju", "repo": "https://github.com/juju/juju", "vendor": "Canonical", "versions": [{"lessThan": "2.9.52", "status": "affected", "version": "2.0.0", "versionType": "semver"}, {"lessThan": "3.6.8", "status": "affected", "version": "3.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Any user with a Juju account on a controller could read debug log messages from the /log endpoint."}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-285", "description": "CWE-285 Improper Authentication", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63"}], "source": {"advisory": "https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63", "discovery": "INTERNAL"}, "title": "Sensitive log retrieval in Juju", "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-07-08T16:47:44.427Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-08T19:09:11.652417Z", "id": "CVE-2025-53512", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-08T19:09:24.844Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-53512", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-08T19:09:11.652417Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-08T19:09:16.987Z"}}], "cna": {"title": "Sensitive log retrieval in Juju", "source": {"advisory": "https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63", "discovery": "INTERNAL"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Any user with a Juju account on a controller could read debug log messages from the /log endpoint."}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/juju/juju", "vendor": "Canonical", "product": "Juju", "versions": [{"status": "affected", "version": "2.0.0", "lessThan": "2.9.52", "versionType": "semver"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.6.8", "versionType": "semver"}], "platforms": ["Linux"], "packageName": "juju", "collectionURL": "https://juju.is/", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63"}], "descriptions": [{"lang": "en", "value": "The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285 Improper Authentication"}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-07-08T16:47:44.427Z"}}}, "cveMetadata": {"cveId": "CVE-2025-53512", "state": "PUBLISHED", "dateUpdated": "2025-07-08T19:09:24.844Z", "dateReserved": "2025-07-02T08:52:42.036Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2025-07-08T16:47:44.427Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}